Ivanti Endpoint Manager存在远程代码执行漏洞（CVE-2024-29847）
Tags
| attack-pattern: | Powershell - T1059.001 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | efe381fd-40cb-4891-a636-a4d7ded2decf |
| Fingerprint | cae6e5b143a75d10 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 20, 2024, midnight |
| Added to db | Sept. 21, 2024, 4:25 p.m. |
| Last updated | Nov. 4, 2024, 8:14 a.m. |
| Headline | Ivanti Endpoint Manager存在远程代码执行漏洞（CVE-2024-29847） |
| Title | Ivanti Endpoint Manager存在远程代码执行漏洞（CVE-2024-29847） |
| Detected Hints/Tags/Attributes | 5/1/7 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Redirection | https://cn-sec.com/?p=3190604 |
| Details | Source | https://cn-sec.com/archives/3190604.html |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 483 | ✔ | CN-SEC 中文网 | https://cn-sec.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 53 | cve-2024-29847 |
|
| Details | Domain | 1 | download.ivanti.com |
|
| Details | File | 1 | 运行deploy.ps1 |
|
| Details | File | 1 | ivanti2022-1-6_rep2tv24.exe |
|
| Details | Url | 1 | https://download.ivanti.com/downloads/patch/component/epm2022/ivanti2022-1-6_rep2tv24.exe |
|
| Details | Url | 1 | https://forums.ivanti.com/s/article/how-to-install-an-ivanti-endpoint-manager-service-update?language=en_us |
|
| Details | Url | 8 | https://forums.ivanti.com/s/article/security-advisory-epm-september-2024-for-epm-2024-and-epm-2022?language=en_us |